]>
Commit | Line | Data |
---|---|---|
a0957d55 | 1 | #!/bin/sh |
4333b89f | 2 | # Copyright 2013-2021 The OpenSSL Project Authors. All Rights Reserved. |
44c8a5e2 | 3 | # |
909f1a2e | 4 | # Licensed under the Apache License 2.0 (the "License"). You may not use |
44c8a5e2 RS |
5 | # this file except in compliance with the License. You can obtain a copy |
6 | # in the file LICENSE in the source distribution or at | |
7 | # https://www.openssl.org/source/license.html | |
8 | ||
a0957d55 DSH |
9 | |
10 | # Utility to recreate S/MIME certificates | |
11 | ||
12 | OPENSSL=../../apps/openssl | |
13 | OPENSSL_CONF=./ca.cnf | |
14 | export OPENSSL_CONF | |
15 | ||
16 | # Root CA: create certificate directly | |
ef898017 | 17 | CN="Test S/MIME RSA Root" $OPENSSL req -config ca.cnf -x509 -noenc \ |
a0957d55 DSH |
18 | -keyout smroot.pem -out smroot.pem -newkey rsa:2048 -days 3650 |
19 | ||
20 | # EE RSA certificates: create request first | |
ef898017 | 21 | CN="Test S/MIME EE RSA #1" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
22 | -keyout smrsa1.pem -out req.pem -newkey rsa:2048 |
23 | # Sign request: end entity extensions | |
24 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
25 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa1.pem | |
26 | ||
ef898017 | 27 | CN="Test S/MIME EE RSA #2" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
28 | -keyout smrsa2.pem -out req.pem -newkey rsa:2048 |
29 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
30 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa2.pem | |
31 | ||
ef898017 | 32 | CN="Test S/MIME EE RSA #3" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
33 | -keyout smrsa3.pem -out req.pem -newkey rsa:2048 |
34 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
35 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smrsa3.pem | |
36 | ||
37 | # Create DSA parameters | |
38 | ||
39 | $OPENSSL dsaparam -out dsap.pem 2048 | |
40 | ||
ef898017 | 41 | CN="Test S/MIME EE DSA #1" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
42 | -keyout smdsa1.pem -out req.pem -newkey dsa:dsap.pem |
43 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
44 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa1.pem | |
ef898017 | 45 | CN="Test S/MIME EE DSA #2" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
46 | -keyout smdsa2.pem -out req.pem -newkey dsa:dsap.pem |
47 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
48 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa2.pem | |
ef898017 | 49 | CN="Test S/MIME EE DSA #3" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
50 | -keyout smdsa3.pem -out req.pem -newkey dsa:dsap.pem |
51 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
52 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdsa3.pem | |
53 | ||
54 | # Create EC parameters | |
55 | ||
56 | $OPENSSL ecparam -out ecp.pem -name P-256 | |
57 | $OPENSSL ecparam -out ecp2.pem -name K-283 | |
58 | ||
ef898017 | 59 | CN="Test S/MIME EE EC #1" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
60 | -keyout smec1.pem -out req.pem -newkey ec:ecp.pem |
61 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
62 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec1.pem | |
ef898017 | 63 | CN="Test S/MIME EE EC #2" $OPENSSL req -config ca.cnf -noenc \ |
a0957d55 DSH |
64 | -keyout smec2.pem -out req.pem -newkey ec:ecp2.pem |
65 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
66 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec2.pem | |
ef898017 | 67 | CN="Test S/MIME EE EC #3" $OPENSSL req -config ca.cnf -noenc \ |
1aee92bf DSH |
68 | -keyout smec3.pem -out req.pem -newkey ec:ecp.pem |
69 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
70 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smec3.pem | |
75787fd8 | 71 | # Create X9.42 DH parameters. |
24d5be7a | 72 | $OPENSSL genpkey -genparam -algorithm DHX -out dhp.pem |
75787fd8 DSH |
73 | # Generate X9.42 DH key. |
74 | $OPENSSL genpkey -paramfile dhp.pem -out smdh.pem | |
75 | $OPENSSL pkey -pubout -in smdh.pem -out dhpub.pem | |
76 | # Generate dummy request. | |
ef898017 | 77 | CN="Test S/MIME EE DH #1" $OPENSSL req -config ca.cnf -noenc \ |
75787fd8 DSH |
78 | -keyout smtmp.pem -out req.pem -newkey rsa:2048 |
79 | # Sign request but force public key to DH | |
80 | $OPENSSL x509 -req -in req.pem -CA smroot.pem -days 3600 \ | |
81 | -force_pubkey dhpub.pem \ | |
82 | -extfile ca.cnf -extensions usr_cert -CAcreateserial >>smdh.pem | |
a0957d55 | 83 | # Remove temp files. |
75787fd8 | 84 | rm -f req.pem ecp.pem ecp2.pem dsap.pem dhp.pem dhpub.pem smtmp.pem smroot.srl |